UPDATE on 12/07/2013 Even with downgraded apache-sshd you might constantly get "Unexpected connection interruption" attempting to add new host, in this case run one more time # engine-setup on master server . Via my experience it helped several times (3.3.1 on F19).Ovirt 3.3.0.1 never required the last hack

UPDATE on 11/23/2013. Same schema would work for 3.3.1with "yum downgrade apache-sshd 0.9.0-2=> 0.7.0-3" to be able to add newhost. When creating VM it's possible to select NIC1"ovirtmgmt/ovirtmgmt". I was able to find http://www.ovirt.org/Features/Detailed_OSN_Integration regarding set up Neutron(Quantum) to create VLANs (external provider) **********************************************************************************

My final target was to create two node oVirt 3.3 cluster and virtual machines using replicated glusterfs 3.4.1 volumes. Choice of firewalld as configured firewall seems to be unacceptable for this purpose in meantime. Selection of iptables firewall allows to complete the task. However, this is only my personal preference. IPv4 firewall with iptables just works for me with no pain and I clearly understand what to do when problems come up, nothing else.

Known issues : host installation

Fedora 19: If the ovirtmgmt bridge is not successfully installed
during initial host-setup, manually click on the host, setup networks,
and add the ovirtmgmt bridge. It is recommended to disable
NetworkManager as well.End quote

Host fully qualified DNS name of this server [ovirt1.localdomain]:
[WARNING] Failed to resolve ovirt1.localdomain using DNS, it can be resolved only locally

firewalld was detected on your computer. Do you wish Setup to configure it? (yes, no) [yes]: no iptables was detected on your computer. Do you wish Setup to configure it? (yes, no) [yes]: yes

--== DATABASE CONFIGURATION ==--

Where is the database located? (Local, Remote) [Local]:
Setup can configure the local postgresql server automatically for the engine to run. This may conflict with existing applications.
Would you like Setup to automatically configure postgresql, or prefer to perform that manually? (Automatic, Manual) [Automatic]:
Using existing credentials

Setup can configure the default page of the web server to present the application home page. This may conflict with existing applications.
Do you wish to set the application as the default page of the web server? (Yes, No) [Yes]:
Setup can configure apache to use SSL using a certificate issued from the internal CA.
Do you wish Setup to configure that, or prefer to perform that manually? (Automatic, Manual) [Automatic]:

--== SYSTEM CONFIGURATION ==--

Configure an NFS share on this server to be used as an ISO Domain? (Yes, No) [Yes]:
Local ISO domain path [/var/lib/exports/iso]:
Local ISO domain name [ISO_DOMAIN]:
Configure WebSocket Proxy on this machine? (Yes, No) [Yes]:

--== END OF CONFIGURATION ==--

[ INFO ] Stage: Setup validation
[WARNING] Less than 16384MB of memory is available

[WARNING] Less than 16384MB of memory is available
A default ISO NFS share has been created on this host.
If IP based access restrictions are required, edit:
entry /var/lib/exports/iso in /etc/exports.d/ovirt-engine-iso-domain.exports
SSH fingerprint: 90:16:09:69:8A:D8:43:C9:87:A7:CF:1A:A3:3B:71:44
Internal CA 5F:2E:12:99:32:55:07:11:C9:F9:AB:58:02:C9:A6:8E:16:91:CA:C1
Web access is enabled at:
http://ovirt1.localdomain:80/ovirt-engine
https://ovirt1.localdomain:443/ovirt-engine
Please use the user "admin" and password specified in order to login into oVirt Engine

--== ALL IN ONE CONFIGURATION ==--

--== NETWORK CONFIGURATION ==--

Host fully qualified DNS name of this server [ovirt1.localdomain]: [WARNING] Failed to resolve ovirt1.localdomain using DNS, it can be resolved only locally

--== DATABASE CONFIGURATION ==--

Where is the database located? (Local, Remote) [Local]: Setup can configure the local postgresql server automatically for the engine to run. This may conflict with existing applications. Would you like Setup to automatically configure postgresql, or prefer to perform that manually? (Automatic, Manual) [Automatic]: Using existing credentials

--== OVIRT ENGINE CONFIGURATION ==--

--== PKI CONFIGURATION ==--

Organization name for certificate [localdomain]:

--== APACHE CONFIGURATION ==--

Setup can configure the default page of the web server to present the application home page. This may conflict with existing applications. Do you wish to set the application as the default page of the web server? (Yes, No) [Yes]: Setup can configure apache to use SSL using a certificate issued from the internal CA. Do you wish Setup to configure that, or prefer to perform that manually? (Automatic, Manual) [Automatic]:

--== SYSTEM CONFIGURATION ==--

Configure an NFS share on this server to be used as an ISO Domain? (Yes, No) [Yes]: Local ISO domain path [/var/lib/exports/iso]: Local ISO domain name [ISO_DOMAIN]: Configure WebSocket Proxy on this machine? (Yes, No) [Yes]:

--== END OF CONFIGURATION ==--

[ INFO ] Stage: Setup validation[WARNING] Less than 16384MB of memory is available

--== SUMMARY ==--

[WARNING] Less than 16384MB of memory is available An ISO NFS share has been created on this host. If IP based access restrictions are required, edit: entry /var/lib/exports/iso in /etc/exports.d/ovirt-engine-iso-domain.exports SSH fingerprint: DB:C5:99:16:0D:67:4B:F5:62:99:B2:D3:E2:C7:7F:59 Internal CA 93:BB:05:42:C6:6F:00:28:A1:F1:90:C5:3E:E3:91:D6:1F:1B:17:3D The following network ports should be opened: tcp:111 tcp:2049 tcp:32803 tcp:443 tcp:49152-49216 tcp:5432 tcp:5634-6166 tcp:6100 tcp:662 tcp:80 tcp:875 tcp:892 udp:111 udp:32769 udp:662 udp:875 udp:892 An example of the required configuration for iptables can be found at: /etc/ovirt-engine/iptables.example In order to configure firewalld, copy the files from /etc/ovirt-engine/firewalld to /etc/firewalld/services and execute the following commands: firewall-cmd -service ovirt-postgres firewall-cmd -service ovirt-https firewall-cmd -service ovirt-aio firewall-cmd -service ovirt-websocket-proxy firewall-cmd -service ovirt-nfs firewall-cmd -service ovirt-http Web access is enabled at: http://ovirt1.localdomain:80/ovirt-engine https://ovirt1.localdomain:443/ovirt-engine Please use the user "admin" and password specified in order to login into oVirt Engine